tracker-indexer crashed with SIGSEGV in tracker_module_metadata_utils_get_data()

Bug #360612 reported by Hadmut Danisch
4
Affects Status Importance Assigned to Milestone
tracker (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Binary package hint: tracker

These plenty and more of bugs in tracker-indexer are not just annoying, they are a security problem. Just by *having* a file in the home directory even without doing anything with the file an ubuntu desktop is highly vulnerable.

tracker-indexer is obviously of poor software quality....

ProblemType: Crash
Architecture: amd64
DistroRelease: Ubuntu 9.04
ExecutablePath: /usr/lib/tracker/tracker-indexer
Package: tracker 0.6.92-1ubuntu2
ProcCmdline: /usr/lib/tracker/tracker-indexer
ProcEnviron:
 SHELL=/bin/tcsh
 PATH=(custom, user)
 LANG=en_US.UTF-8
Signal: 11
SourcePackage: tracker
StacktraceTop:
 tracker_module_metadata_utils_get_data ()
 tracker_module_file_get_metadata ()
 ?? ()
 ?? ()
 g_main_context_dispatch ()
Title: tracker-indexer crashed with SIGSEGV in tracker_module_metadata_utils_get_data()
Uname: Linux 2.6.28-11-generic x86_64
UserGroups: adm admin audio cdrom dialout dip fax fuse kvm lpadmin netdev plugdev sambashare scanner src staff vboxusers video voice www-data

Revision history for this message
Hadmut Danisch (hadmut) wrote :
Revision history for this message
Kees Cook (kees) wrote :

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

security vulnerability: yes → no
visibility: private → public
Revision history for this message
dino99 (9d9) wrote :

This version has died long ago; no more supported

Changed in tracker (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.